Hi Folks,
Why not specify a special username which will indicate that trusted
authentication is to be used, ie , DOMAIN-USER.

Make it configurable in the config file and if it is used, ignore the
password and do the domain stuff.

That way, existing tools will still work.

For the future, you could allow the client to identify the user name
from the server, so the tools could flag it automatically.

Regards
Ian Newby